Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-03_e663004a81348c99c4dffb352411fdca_mafia

  • Size

    1.7MB

  • Sample

    240603-2aj82aca88

  • MD5

    e663004a81348c99c4dffb352411fdca

  • SHA1

    a2fc1b678155db97978ce6d728da93cbbe4a0fd7

  • SHA256

    2e103871d889c34072f71de6763075addc8388252d143798db4acd543013ceb9

  • SHA512

    69fb38a61447eeea64b7b13fb35ed273844506d9d4bb4366be8e36a37034e736a9d759b0a20f90a6d346ba41c9b6b0ad4ba86f143bc0ef4ff2a27528a844b626

  • SSDEEP

    49152:EpEsgw14kZV2HXsMnmjEREseBSsxHnfXsrHYi2Yijig:qwYJYW

Score
10/10

Malware Config

Targets

    • Target

      2024-06-03_e663004a81348c99c4dffb352411fdca_mafia

    • Size

      1.7MB

    • MD5

      e663004a81348c99c4dffb352411fdca

    • SHA1

      a2fc1b678155db97978ce6d728da93cbbe4a0fd7

    • SHA256

      2e103871d889c34072f71de6763075addc8388252d143798db4acd543013ceb9

    • SHA512

      69fb38a61447eeea64b7b13fb35ed273844506d9d4bb4366be8e36a37034e736a9d759b0a20f90a6d346ba41c9b6b0ad4ba86f143bc0ef4ff2a27528a844b626

    • SSDEEP

      49152:EpEsgw14kZV2HXsMnmjEREseBSsxHnfXsrHYi2Yijig:qwYJYW

    Score
    9/10
    • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features

    • Detects executables referencing many IR and analysis tools

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

MITRE ATT&CK Enterprise v15

Tasks